This policy explains what GSD Consultants, LLC collects, why, how long we keep it, and how to have it deleted. It covers our website and our social media publishing service, including everything we access through Meta's Instagram and Facebook platforms.
Who we are
GSD Consultants, LLC is an Arkansas limited liability company. We are the data controller for the information described here.
GSD Consultants, LLC1430 Allens Mill
Cave Springs, Arkansas 72718
United States
seansmith.gsd@gmail.com
501-278-7782
What our publishing service does
Our social media publishing service posts images to a customer's own Instagram professional account on a schedule the customer sets. The customer supplies the images. We publish them. That is the entire function of the service.
We do not read direct messages. We do not post comments or replies. We do not follow, unfollow or like anything on a customer's behalf. We do not collect data about a customer's followers or about anyone who interacts with their posts.
Information we collect
Information you give us
- Your name, business name, email address and phone number, so we can set up your account and contact you.
- The images you provide for publication, and any captions you write for them.
- Your posting schedule and preferences.
Information from Meta, when you connect your account
When you authorize our application through Instagram or Facebook, Meta gives us an access token and a limited set of data. Specifically:
| Permission | What we receive and why |
|---|---|
instagram_basic |
Your Instagram professional account's numeric ID and username. We use these to identify which account to publish to. |
instagram_content_publish |
Permission to publish images to your account, and to check how many posts you have published in the last 24 hours so we stay inside Instagram's rate limit. This permission is how the service works. |
pages_show_list |
The list of Facebook Pages you manage, used only to find the Page linked to your Instagram professional account. |
pages_read_engagement |
Confirmation that your Facebook Page is connected to your Instagram account. Required by Meta to establish the link between the two. |
We also store the access token Meta issues. The token is what allows us to publish on your behalf. We refresh it automatically so the service keeps running, and we delete it when you cancel.
We do not receive or store your Instagram or Facebook password. Meta never gives it to us.
Payment information
Payments are handled by a third-party payment processor. Your card number is entered directly with that processor and is never transmitted to or stored on our systems. We keep a record of what you were billed and whether it was paid.
Website visitors
Our website is served through Cloudflare, which records standard server request data such as IP address, browser type and the pages requested. We use this only to keep the site running and secure. We do not use advertising cookies and we do not track visitors across other websites.
How we use information
- To publish your images to your Instagram account on your schedule.
- To keep a record of which images have been published and when, so the same image is not repeated too soon.
- To contact you about your account, a service problem, or billing.
- To bill you for the service.
We do not sell your information. We do not share it with advertisers. We do not use your images, captions or account data to train machine learning models. We do not use your data for any purpose other than delivering and billing for the service you signed up for.
Who we share information with
We share only what is necessary, and only with these parties:
- Meta Platforms — we send your images and captions to Instagram in order to publish them. That is the point of the service.
- Cloudflare — our hosting and storage provider. Your images and account records are stored on Cloudflare infrastructure in the United States.
- Our payment processor — handles your card details and processes charges.
We may also disclose information if required by law, or to protect our rights or the safety of others.
How long we keep it
| Access tokens | Deleted within 7 days of cancellation, or immediately on request. |
|---|---|
| Your images and captions | Deleted within 30 days of cancellation, or immediately on request. |
| Posting history | Deleted within 30 days of cancellation. |
| Contact and billing records | Retained up to 7 years, as required for tax and accounting. |
How to delete your data
You can remove our access yourself at any time, without contacting us. In Instagram, go to Settings, then Website Permissions, then Apps and Websites, and remove GSD Consultants. Revoking access stops all publishing immediately.
To have your stored data deleted, email seansmith.gsd@gmail.com with the subject line "Delete my data" and the Instagram username on the account. We will delete everything except the billing records we are legally required to keep, and confirm to you by email within 30 days.
Security
Access tokens are stored encrypted and are not kept on personal computers or in shared documents. Access is limited to the people who operate the service. No system is perfect, and we do not claim otherwise. If a breach affects your data, we will tell you.
Your rights
Wherever you live, you may ask us what we hold about you, ask us to correct it, or ask us to delete it. Email the address above. If you are in a jurisdiction with specific statutory privacy rights, such as the European Economic Area, the United Kingdom or California, we will honor those rights whether or not they apply to us by law.
Children
This service is for businesses. It is not directed at anyone under 18, and we do not knowingly collect information from children.
Changes to this policy
If we change this policy in a way that affects how we handle your information, we will email customers before the change takes effect and update the date at the top of this page.
Questions
Email seansmith.gsd@gmail.com or call 501-278-7782.